Shopify · Report #416474
subdomain Takeover at blog.exchangemarketplace.com
Validstatus
lowseverity
27upvotes
1 Oct 2018disclosed
Summary
@m7mdharoun noticed that blog.exchangemarketplace.com had been configured with a DNS record pointing at Shopify, but that the domain had not been claimed. This allowed him to add the domain to his own store. Because the domain had not been used (and plans to use it had been abandoned) the security impact of this subdomain takeover was minimal.
#For full report and the Takeover with Steps visit my blog :
██████
How it was found
Hi ,
I believe that exchangemarketplace.com is belong to shopify it was vulnerable to Subdomain Takeover
so I takeover it to my shopify store
Poc :goto blog.exchangemarketplace.com
#Suggested fix :
clear your subdomain dns
Impact
Subdomain Takeover